PT-2026-99453

Name of the Vulnerable Software and Affected Versions Contrast versions 1.14.0 through 1.23.0 Description Runtime policies are generated that fail to detect all container image substitutions. This occurs because an allow storage rule accepts storage entries using the image guest pull driver witho...

CVE-2025-64186: Improper Verification of Cryptographic Signature

Evervault is a payment security solution. A vulnerability was identified in the evervault-go SDK’s attestation verification logic in versions of evervault-go prior to 1.3.2 that may allow incomplete documents to pass validation. This may cause the client to trust an enclave operator that does not...

Authentication flaw

The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the XML parser doesn’t guarantee integrity in the XML round-trip encoding/decoding XML data...